API 接口

Authorization: Bearer YOUR_API_KEY

{
  "url": "https://your-server.com/webhook",
  "events": ["form_data_add", "form_data_update", "form_data_delete"],
  "headers": {
    "X-Custom-Header": "value"
  }
}

{
  "event": "form_data_add",
  "formKey": "abc123",
  "data": {
    "id": "data_001",
    "fields": {
      "name": "张三",
      "email": "zhangsan@example.com"
    },
    "createdAt": "2024-01-15T10:30:00Z"
  }
}

{
  "error": {
    "code": "INVALID_REQUEST",
    "message": "描述错误原因"
  }
}

# 分页获取所有表单
curl -X GET "https://api.mobyform.com/api/forms?page=1&size=10" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

// 获取指定表单的提交数据
const response = await fetch(
  'https://api.mobyform.com/api/forms/abc123/data?page=1&size=20',
  {
    method: 'GET',
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY',
      'Content-Type': 'application/json',
    },
  }
);

const result = await response.json();
console.log(`提交总数: ${result.total}`);
console.log('数据:', result.data);

import requests

# 向表单提交数据
url = "https://api.mobyform.com/api/forms/abc123/data"
headers = {
    "Authorization": "Bearer YOUR_API_KEY",
    "Content-Type": "application/json",
}
payload = {
    "fields": {
        "name": "李四",
        "email": "lisi@example.com",
        "feedback": "产品体验很棒！"
    }
}

response = requests.post(url, json=payload, headers=headers)
print(f"状态码: {response.status_code}")
print(f"创建结果: {response.json()}")

GET /api/forms?page=2&size=10

{
  "data": [...],
  "total": 56,
  "page": 2,
  "size": 10,
  "totalPages": 6
}

const crypto = require('crypto');

function verifyWebhookSignature(payload, signature, secret) {
  const expectedSignature = crypto
    .createHmac('sha256', secret)
    .update(payload, 'utf8')
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expectedSignature)
  );
}

// 在 Express 处理器中使用
app.post('/webhook', (req, res) => {
  const signature = req.headers['x-webhook-signature'];
  const rawBody = JSON.stringify(req.body);

  if (!verifyWebhookSignature(rawBody, signature, 'YOUR_WEBHOOK_SECRET')) {
    return res.status(401).send('签名无效');
  }

  // 处理 Webhook 事件
  console.log('已验证事件:', req.body.event);
  res.status(200).send('OK');
});

import hmac
import hashlib

def verify_webhook_signature(payload: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(
        secret.encode('utf-8'),
        payload,
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

# 在 Flask 处理器中使用
@app.route('/webhook', methods=['POST'])
def handle_webhook():
    signature = request.headers.get('X-Webhook-Signature', '')
    if not verify_webhook_signature(request.data, signature, 'YOUR_WEBHOOK_SECRET'):
        return '签名无效', 401

    event = request.json
    print(f"已验证事件: {event['event']}")
    return 'OK', 200